├── __init__.py
├── simple_test.py
├── readme
├── test.py
├── bcrypt.py
└── blowfish.py
/__init__.py:
--------------------------------------------------------------------------------
1 | '''
2 | Created on 26/03/2011
3 |
4 | @author: Shay&Galia
5 | '''
6 |
--------------------------------------------------------------------------------
/simple_test.py:
--------------------------------------------------------------------------------
1 | import bcrypt
2 |
3 | password = "You know my name"
4 | salt = bcrypt.gensalt(2)
5 | hashed = bcrypt.hashpw(password, salt)
6 |
7 | # Check that an unencrypted password matches one that has
8 | # previously been hashed
9 | hashed2 = bcrypt.hashpw(password, hashed)
10 |
11 | print hashed2
12 | if hashed2 == hashed:
13 | print "It matches"
14 | else:
15 | print "It does not match"
--------------------------------------------------------------------------------
/readme:
--------------------------------------------------------------------------------
1 | The is a native Python implementation of the py-bcrypt package from http://www.mindrot.org/projects/py-bcrypt/ made by Damien Miller.
2 | --- begin excerpt from the original package
3 |
4 | py-bcrypt is a Python wrapper of OpenBSD's Blowfish password hashing code, as described in "A Future-Adaptable Password Scheme" by Niels Provos and David Mazières.
5 |
6 | This system hashes passwords using a version of Bruce Schneier's Blowfish block cipher with modifications designed to raise the cost of off-line password cracking and frustrate fast hardware implementation. The computation cost of the algorithm is parametised, so it can be increased as computers get faster. The intent is to make a compromise of a password database less likely to result in an attacker gaining knowledge of the plaintext passwords (e.g. using John the Ripper).
7 |
8 | py-bcrypt requires Python 2.4. Older versions may work, but the bcrypt.gensalt() method won't - it requires the cryptographic random number generator os.urandom() introduced in 2.4.
9 |
10 | py-bcrypt is licensed under a ISC/BSD licence. The underlying Blowfish and hashing code implementation is taken from OpenBSD's libc and is subject to a 4-term BSD license. See the LICENSE file for details.
11 |
12 | The API is very simple:
13 |
14 | import bcrypt
15 |
16 | # Hash a password for the first time, with a randomly-generated salt
17 | hashed = bcrypt.hashpw(password, bcrypt.gensalt())
18 |
19 | # gensalt's log_rounds parameter determines the complexity.
20 | # The work factor is 2**log_rounds, and the default is 12
21 | hashed = bcrypt.hashpw(password, bcrypt.gensalt(10))
22 |
23 | # Check that an unencrypted password matches one that has
24 | # previously been hashed
25 | if bcrypt.hashpw(password, hashed) == hashed:
26 | print "It matches"
27 | else:
28 | print "It does not match"
29 |
30 | --- end excerpt from the original package
31 |
32 | This excerpt pretty much sums up this package also with two main differences:
33 | 1. This package is 100% native python.
34 | 2. Is is two orders of magnitude slower!, so gensalt() by default only generate the salt using 1 round instead of 1024 rounds as in the original package.
35 | The hash is still quite strong but not as strong as .
36 |
37 | Use this package when you need to generate a password hash and you can only use native python Google App Engine
38 |
39 | I did some obvious optimization to speed things up and I will be more then happy if someone will make it go faster
40 |
41 | The package comes with the original unittest of the native package and passes all the tests.
--------------------------------------------------------------------------------
/test.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python
2 |
3 | # Copyright (c) 2006 Damien Miller
4 | #
5 | # Permission to use, copy, modify, and distribute this software for any
6 | # purpose with or without fee is hereby granted, provided that the above
7 | # copyright notice and this permission notice appear in all copies.
8 | #
9 | # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 | # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 | # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 | # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 | # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 | # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 | # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 |
17 | # $Id: test.py,v 1.1.1.1 2006/05/22 11:53:27 djm Exp $
18 |
19 | import bcrypt
20 | import unittest
21 |
22 | test_vectors = [
23 | [ '', '$2a$06$DCq7YPn5Rq63x1Lad4cll.',
24 | '$2a$06$DCq7YPn5Rq63x1Lad4cll.TV4S6ytwfsfvkgY8jIucDrjc8deX1s.' ],
25 | [ '', '$2a$08$HqWuK6/Ng6sg9gQzbLrgb.',
26 | '$2a$08$HqWuK6/Ng6sg9gQzbLrgb.Tl.ZHfXLhvt/SgVyWhQqgqcZ7ZuUtye' ],
27 | [ '', '$2a$10$k1wbIrmNyFAPwPVPSVa/ze',
28 | '$2a$10$k1wbIrmNyFAPwPVPSVa/zecw2BCEnBwVS2GbrmgzxFUOqW9dk4TCW' ],
29 | [ '', '$2a$12$k42ZFHFWqBp3vWli.nIn8u',
30 | '$2a$12$k42ZFHFWqBp3vWli.nIn8uYyIkbvYRvodzbfbK18SSsY.CsIQPlxO' ],
31 | [ 'a', '$2a$06$m0CrhHm10qJ3lXRY.5zDGO',
32 | '$2a$06$m0CrhHm10qJ3lXRY.5zDGO3rS2KdeeWLuGmsfGlMfOxih58VYVfxe' ],
33 | [ 'a', '$2a$08$cfcvVd2aQ8CMvoMpP2EBfe',
34 | '$2a$08$cfcvVd2aQ8CMvoMpP2EBfeodLEkkFJ9umNEfPD18.hUF62qqlC/V.' ],
35 | [ 'a', '$2a$10$k87L/MF28Q673VKh8/cPi.',
36 | '$2a$10$k87L/MF28Q673VKh8/cPi.SUl7MU/rWuSiIDDFayrKk/1tBsSQu4u' ],
37 | [ 'a', '$2a$12$8NJH3LsPrANStV6XtBakCe',
38 | '$2a$12$8NJH3LsPrANStV6XtBakCez0cKHXVxmvxIlcz785vxAIZrihHZpeS' ],
39 | [ 'abc', '$2a$06$If6bvum7DFjUnE9p2uDeDu',
40 | '$2a$06$If6bvum7DFjUnE9p2uDeDu0YHzrHM6tf.iqN8.yx.jNN1ILEf7h0i' ],
41 | [ 'abc', '$2a$08$Ro0CUfOqk6cXEKf3dyaM7O',
42 | '$2a$08$Ro0CUfOqk6cXEKf3dyaM7OhSCvnwM9s4wIX9JeLapehKK5YdLxKcm' ],
43 | [ 'abc', '$2a$10$WvvTPHKwdBJ3uk0Z37EMR.',
44 | '$2a$10$WvvTPHKwdBJ3uk0Z37EMR.hLA2W6N9AEBhEgrAOljy2Ae5MtaSIUi' ],
45 | [ 'abc', '$2a$12$EXRkfkdmXn2gzds2SSitu.',
46 | '$2a$12$EXRkfkdmXn2gzds2SSitu.MW9.gAVqa9eLS1//RYtYCmB1eLHg.9q' ],
47 | [ 'abcdefghijklmnopqrstuvwxyz', '$2a$06$.rCVZVOThsIa97pEDOxvGu',
48 | '$2a$06$.rCVZVOThsIa97pEDOxvGuRRgzG64bvtJ0938xuqzv18d3ZpQhstC' ],
49 | [ 'abcdefghijklmnopqrstuvwxyz', '$2a$08$aTsUwsyowQuzRrDqFflhge',
50 | '$2a$08$aTsUwsyowQuzRrDqFflhgekJ8d9/7Z3GV3UcgvzQW3J5zMyrTvlz.' ],
51 | [ 'abcdefghijklmnopqrstuvwxyz', '$2a$10$fVH8e28OQRj9tqiDXs1e1u',
52 | '$2a$10$fVH8e28OQRj9tqiDXs1e1uxpsjN0c7II7YPKXua2NAKYvM6iQk7dq' ],
53 | [ 'abcdefghijklmnopqrstuvwxyz', '$2a$12$D4G5f18o7aMMfwasBL7Gpu',
54 | '$2a$12$D4G5f18o7aMMfwasBL7GpuQWuP3pkrZrOAnqP.bmezbMng.QwJ/pG' ],
55 | [ '~!@#$%^&*() ~!@#$%^&*()PNBFRD', '$2a$06$fPIsBO8qRqkjj273rfaOI.',
56 | '$2a$06$fPIsBO8qRqkjj273rfaOI.HtSV9jLDpTbZn782DC6/t7qT67P6FfO' ],
57 | [ '~!@#$%^&*() ~!@#$%^&*()PNBFRD', '$2a$08$Eq2r4G/76Wv39MzSX262hu',
58 | '$2a$08$Eq2r4G/76Wv39MzSX262huzPz612MZiYHVUJe/OcOql2jo4.9UxTW' ],
59 | [ '~!@#$%^&*() ~!@#$%^&*()PNBFRD', '$2a$10$LgfYWkbzEvQ4JakH7rOvHe',
60 | '$2a$10$LgfYWkbzEvQ4JakH7rOvHe0y8pHKF9OaFgwUZ2q7W2FFZmZzJYlfS' ],
61 | [ '~!@#$%^&*() ~!@#$%^&*()PNBFRD', '$2a$12$WApznUOJfkEGSmYRfnkrPO',
62 | '$2a$12$WApznUOJfkEGSmYRfnkrPOr466oFDCaj4b6HY3EXGvfxm43seyhgC' ],
63 | ]
64 |
65 | class TestRadix(unittest.TestCase):
66 | def test_00__test_vectors(self):
67 | for plain, salt, expected in test_vectors:
68 | print plain, salt, expected
69 | self.assertEqual(bcrypt.hashpw(plain, salt), expected)
70 | break
71 |
72 | def ignore_test_01__gensalt(self):
73 | for plain, salt, expected in test_vectors:
74 | for i in range(2,14,2):
75 | print i, plain, salt, expected
76 | salt = bcrypt.gensalt(i)
77 | crypted = bcrypt.hashpw(plain, salt)
78 | crypted2 = bcrypt.hashpw(plain, crypted)
79 | self.assertEqual(crypted, crypted2)
80 |
81 |
82 | def main():
83 | unittest.main()
84 |
85 | if __name__ == '__main__':
86 | main()
87 |
88 |
--------------------------------------------------------------------------------
/bcrypt.py:
--------------------------------------------------------------------------------
1 | """OpenBSD Blowfish password hashing.
2 |
3 | This module implements the OpenBSD Blowfish password hashing
4 | algorithm, as described in "A Future-Adaptable Password Scheme" by
5 | Niels Provos and David Mazieres.
6 |
7 | This system hashes passwords using a version of Bruce Schneier's
8 | Blowfish block cipher with modifications designed to raise the cost
9 | of off-line password cracking. The computation cost of the algorithm
10 | is parametised, so it can be increased as computers get faster.
11 |
12 | Passwords are hashed using the hashpw() routine:
13 |
14 | hashpw(password, salt) -> hashed_password
15 |
16 | Salts for the the second parameter may be randomly generated using the
17 | gensalt() function:
18 |
19 | gensalt(log_rounds = 12) -> random_salt
20 |
21 | The parameter "log_rounds" defines the complexity of the hashing. The
22 | cost increases as 2**log_rounds.
23 | """
24 |
25 | # This password hashing algorithm was designed by David Mazieres
26 | # and works as follows:
27 | #
28 | # 1. state := InitState ()
29 | # 2. state := ExpandKey (state, salt, password) 3.
30 | # REPEAT rounds:
31 | # state := ExpandKey (state, 0, salt)
32 | # state := ExpandKey(state, 0, password)
33 | # 4. ctext := "OrpheanBeholderScryDoubt"
34 | # 5. REPEAT 64:
35 | # ctext := Encrypt_ECB (state, ctext);
36 | # 6. RETURN Concatenate (salt, ctext);
37 |
38 |
39 |
40 | # This implementation is adaptable to current computing power.
41 | # You can have up to 2^31 rounds which should be enough for some
42 | # time to come.
43 |
44 | import blowfish
45 | import os
46 |
47 | BCRYPT_VERSION = '2'
48 | BCRYPT_MAXSALT = 16
49 | BCRYPT_BLOCKS = 6 # Ciphertext blocks
50 | BCRYPT_MINROUNDS = 1 # we have log2(rounds) in salt
51 |
52 | def _encode_salt(salt, log_rounds):
53 | """encode_salt(csalt, log_rounds) -> encoded_salt
54 | Encode a raw binary salt and the specified log2(rounds) as a
55 | standard bcrypt text salt. Used internally by bcrypt.gensalt()"""
56 |
57 | if len(salt) != 16:
58 | raise ValueError("Invalid salt length")
59 |
60 | if log_rounds < 1 or log_rounds > 31:
61 | raise ValueError("Invalid number of rounds")
62 |
63 | result = "$%sa$%2.2u$" % (BCRYPT_VERSION, log_rounds)
64 | result += encode_base64(salt)
65 | return result
66 |
67 |
68 | # We handle $Vers$log2(NumRounds)$salt+passwd$
69 | # i.e. $2$04$iwouldntknowwhattosayetKdJ6iFtacBqJdKe6aW7ou
70 |
71 | def hashpw(key, salt):
72 | """hashpw(password, salt) -> hashed_password
73 | Hash the specified password and the salt using the OpenBSD
74 | Blowfish password hashing algorithm. Returns the hashed password."""
75 |
76 | # Discard "$" identifier
77 | index = 0
78 | index += 1
79 |
80 | if salt[index] > BCRYPT_VERSION:
81 | raise ValueError('Invalid Version')
82 |
83 | # Check for minor versions
84 | if salt[index+1] != '$':
85 | if salt[index+1] == 'a':
86 | # 'ab' should not yield the same as 'abab'
87 | minor = salt[index+1]
88 | index += 1
89 | else:
90 | raise ValueError('Invalid Sig')
91 | else:
92 | minor = 0
93 |
94 | # Discard version + "$" identifier
95 | index += 2
96 |
97 | if salt[index+2] != '$':
98 | # Out of sync with passwd entry
99 | raise ValueError('Invalid Sig')
100 |
101 | # Computer power doesn't increase linear, 2^x should be fine
102 | n = int(salt[index:index+2])
103 | if n > 31 or n < 0:
104 | raise ValueError('Invalid rounds')
105 |
106 | logr = n
107 | rounds = 1 << logr
108 | if rounds < BCRYPT_MINROUNDS:
109 | raise ValueError('Invalid rounds')
110 |
111 | # Discard num rounds + "$" identifier
112 | index += 3
113 |
114 | csalt = salt[index:]
115 | if len(csalt) * 3 / 4 < BCRYPT_MAXSALT:
116 | raise ValueError('Invalid salt')
117 |
118 | # We dont want the base64 salt but the raw data
119 | csalt = decode_base64(csalt)
120 |
121 | if minor >= 'a':
122 | key += '\0'
123 |
124 | key = [ord(ch) for ch in key]
125 | state = blowfish.initstate()
126 | # Setting up S-Boxes and Subkeys
127 | blowfish.expandstate(state, csalt, key)
128 |
129 | for _ in range(rounds):
130 | blowfish.expand0state(state, key)
131 | blowfish.expand0state(state, csalt)
132 |
133 | ciphertext = [ord(ch) for ch in "OrpheanBeholderScryDoubt"]
134 |
135 | # This can be precomputed later
136 | j = 0;
137 | cdata = [None] * BCRYPT_BLOCKS
138 | for i in xrange(BCRYPT_BLOCKS):
139 | cdata[i], j = blowfish.stream2word(ciphertext, j)
140 |
141 | # Now do the encryption
142 | for _ in xrange(64):
143 | blowfish.pybc_blf_enc(state, cdata, BCRYPT_BLOCKS / 2)
144 |
145 | for i in xrange(BCRYPT_BLOCKS):
146 | ciphertext[4 * i + 3] = cdata[i] & 0xff
147 | cdata[i] = cdata[i] >> 8
148 | ciphertext[4 * i + 2] = cdata[i] & 0xff
149 | cdata[i] = cdata[i] >> 8
150 | ciphertext[4 * i + 1] = cdata[i] & 0xff
151 | cdata[i] = cdata[i] >> 8
152 | ciphertext[4 * i + 0] = cdata[i] & 0xff
153 |
154 | encrypted = ''
155 | encrypted += '$'
156 | encrypted += str(BCRYPT_VERSION)
157 | if minor > 0:
158 | encrypted += minor
159 |
160 | encrypted += '$'
161 |
162 | encrypted += "%2.2u$" % (logr)
163 |
164 | encrypted += encode_base64(csalt)
165 | encrypted += encode_base64(ciphertext[:4 * BCRYPT_BLOCKS - 1])
166 |
167 | return encrypted
168 |
169 | def gensalt(log_rounds = 1):
170 | """Generate a random text salt for use with hashpw(). "log_rounds"
171 | defines the complexity of the hashing, increasing the cost as
172 | 2**log_rounds."""
173 | return _encode_salt([ord(ch) for ch in os.urandom(16)], min(max(log_rounds, 1), 31))
174 |
175 |
176 | Base64Code = "./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
177 |
178 | index_64 = [
179 | 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
180 | 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
181 | 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
182 | 255, 255, 255, 255, 255, 255, 255, 255, 255, 255,
183 | 255, 255, 255, 255, 255, 255, 0, 1, 54, 55,
184 | 56, 57, 58, 59, 60, 61, 62, 63, 255, 255,
185 | 255, 255, 255, 255, 255, 2, 3, 4, 5, 6,
186 | 7, 8, 9, 10, 11, 12, 13, 14, 15, 16,
187 | 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27,
188 | 255, 255, 255, 255, 255, 255, 28, 29, 30,
189 | 31, 32, 33, 34, 35, 36, 37, 38, 39, 40,
190 | 41, 42, 43, 44, 45, 46, 47, 48, 49, 50,
191 | 51, 52, 53, 255, 255, 255, 255, 255]
192 |
193 | def CHAR64(c):
194 | return 255 if ord(c) > 127 else index_64[ord(c)]
195 |
196 | def decode_base64(data):
197 | dest_index = 0
198 | result = []
199 | for src_index in range(0, len(data), 4):
200 | c1 = CHAR64(data[src_index])
201 |
202 | if src_index + 1 >= len(data):
203 | break
204 |
205 | c2 = CHAR64(data[src_index+1])
206 |
207 | # Invalid data */
208 | if c1 == 255 or c2 == 255:
209 | break
210 |
211 | result.append((c1 << 2) | ((c2 & 0x30) >> 4))
212 | dest_index += 1
213 |
214 | if src_index + 2 >= len(data) or dest_index == BCRYPT_MAXSALT:
215 | break
216 |
217 | c3 = CHAR64(data[src_index + 2])
218 | if c3 == 255:
219 | break
220 |
221 | result.append(((c2 & 0x0f) << 4) | ((c3 & 0x3c) >> 2))
222 | dest_index += 1
223 |
224 | if src_index + 3 >= len(data) or dest_index == BCRYPT_MAXSALT:
225 | break
226 |
227 | c4 = CHAR64(data[src_index + 3])
228 | if c4 == 255:
229 | break
230 |
231 | result.append(((c3 & 0x03) << 6) | c4)
232 | dest_index += 1
233 |
234 | if dest_index == BCRYPT_MAXSALT:
235 | break
236 |
237 | return result
238 |
239 | def encode_base64(data):
240 | src_index = 0
241 | result = ''
242 | while src_index < len(data):
243 | c1 = data[src_index]
244 | src_index += 1
245 | result += Base64Code[c1 >> 2]
246 | c1 = (c1 & 0x03) << 4
247 | if src_index >= len(data):
248 | result += Base64Code[c1]
249 | break
250 |
251 | c2 = data[src_index]
252 | src_index += 1
253 | c1 |= (c2 >> 4) & 0x0f
254 | result += Base64Code[c1]
255 | c1 = (c2 & 0x0f) << 2;
256 | if src_index >= len(data):
257 | result += Base64Code[c1]
258 | break
259 |
260 | c2 = data[src_index]
261 | src_index += 1
262 | c1 |= (c2 >> 6) & 0x03
263 | result += Base64Code[c1]
264 | result += Base64Code[c2 & 0x3f]
265 |
266 | return result
267 |
--------------------------------------------------------------------------------
/blowfish.py:
--------------------------------------------------------------------------------
1 | # $OpenBSD: blowfish.cL,v 1.18 2004/11/02 17:23:26 hshoexer Exp $ #/
2 | #
3 | # Blowfish block cipher for OpenBSD
4 | # Copyright 1997 Niels Provos
5 | # All rights reserved.
6 | #
7 | # Implementation advice by David Mazieres .
8 | #
9 | # Redistribution and use in source and binary forms, with or without
10 | # modification, are permitted provided that the following conditions
11 | # are met:
12 | # 1. Redistributions of source code must retain the above copyright
13 | # noticeL, this list of conditions and the following disclaimer.
14 | # 2. Redistributions in binary form must reproduce the above copyright
15 | # noticeL, this list of conditions and the following disclaimer in the
16 | # documentation and/or other materials provided with the distribution.
17 | # 3. All advertising materials mentioning features or use of this software
18 | # must display the following acknowledgement:
19 | # This product includes software developed by Niels Provos.
20 | # 4. The name of the author may not be used to endorse or promote products
21 | # derived from this software without specific prior written permission.
22 | #
23 | # THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
24 | # IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
25 | # OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
26 | # IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
27 | # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
28 | # NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USeL,
29 | # DATaL, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
30 | # THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
31 | # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
32 | # THIS SOFTWAReL, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
33 |
34 |
35 | # This code is derived from section 14.3 and the given source
36 | # in section V of Applied Cryptography, second edition.
37 | # Blowfish is an unpatented fast block cipher designed by
38 | # Bruce Schneier.
39 |
40 |
41 | # Function for Feistel Networks
42 |
43 | import array
44 |
45 | BLF_N = 16 # Number of Subkeys
46 | BLF_MAXKEYLEN = ((BLF_N-2)*4) # 448 bits
47 |
48 | def encipher(ctx, xl, xr):
49 | s = ctx.S
50 | p = ctx.P
51 |
52 | Xl = xl;
53 | Xr = xr;
54 |
55 | Xl ^= p[0];
56 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[1]
57 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[2]
58 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[3]
59 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[4]
60 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[5]
61 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[6]
62 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[7]
63 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[8]
64 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[9]
65 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[10]
66 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[11]
67 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[12]
68 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[13]
69 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[14]
70 | Xr ^= (((s[((Xl>>24)&0xFF)] + s[0x100 + ((Xl>>16)&0xFF)]) ^ s[0x200 + ((Xl>> 8)&0xFF)]) + s[0x300 + (Xl&0xFF)]) ^ p[15]
71 | Xl ^= (((s[((Xr>>24)&0xFF)] + s[0x100 + ((Xr>>16)&0xFF)]) ^ s[0x200 + ((Xr>> 8)&0xFF)]) + s[0x300 + (Xr&0xFF)]) ^ p[16]
72 |
73 | return ((Xr ^ p[17]) & 0xFFFFFFFF, Xl & 0xFFFFFFFF)
74 |
75 | def stream2word(data, current):
76 | temp = 0x00000000L;
77 | j = current
78 |
79 | for _ in xrange(4):
80 | if j >= len(data):
81 | j = 0
82 |
83 | temp = ((temp << 8) | data[j]) & 0xFFFFFFFF;
84 | j+=1
85 |
86 | return (temp, j);
87 |
88 | def expand0state(ctx, key):
89 | j = 0;
90 | p = ctx.P
91 | for i in xrange(BLF_N + 2):
92 | # Extract 4 int8 to 1 int32 from keystream
93 | temp, j = stream2word(key, j)
94 | p[i] ^= temp
95 |
96 | j = 0
97 | datal = 0x0L
98 | datar = 0x0L
99 | for i in xrange(0, BLF_N + 2, 2):
100 | datal, datar = encipher(ctx, datal, datar);
101 | p[i + 0] = datal
102 | p[i + 1] = datar
103 |
104 | s = ctx.S
105 | for i in xrange(0, 4*256, 2):
106 | datal, datar = encipher(ctx, datal, datar);
107 |
108 | s[i + 0] = datal
109 | s[i + 1] = datar
110 |
111 | def expandstate(ctx, data, key):
112 | j = 0
113 | p = ctx.P
114 | for i in xrange(BLF_N + 2):
115 | # Extract 4 int8 to 1 int32 from keystream
116 | temp, j = stream2word(key, j);
117 | p[i] ^= temp
118 |
119 | j = 0
120 | datal = 0x00000000
121 | datar = 0x00000000
122 | for i in xrange(0, BLF_N + 2L, 2):
123 | d, j = stream2word(data, j);
124 | datal ^= d
125 |
126 | d, j = stream2word(data, j);
127 | datar ^= d
128 |
129 | datal, datar = encipher(ctx, datal, datar);
130 |
131 | p[i + 0] = datal
132 | p[i + 1] = datar
133 |
134 | s = ctx.S
135 | for i in xrange(0, 4*256, 2):
136 | d,j = stream2word(data, j);
137 | datal ^= d
138 | d,j = stream2word(data, j);
139 | datar ^= d
140 | datal, datar = encipher(ctx, datal, datar);
141 |
142 | s[i + 0] = datal
143 | s[i + 1] = datar
144 |
145 | def pybc_blf_enc(ctx, data, blocks):
146 | for index in range(0, blocks*2, 2):
147 | data[index], data[index+1] = encipher(ctx, data[index], data[index+1])
148 |
149 |
150 | def initstate():
151 | # P-box and S-box tables initialized with digits of Pi
152 |
153 | class Ctx:
154 | S = array.array('L', [
155 | 0xd1310ba6L, 0x98dfb5acL, 0x2ffd72dbL, 0xd01adfb7L,
156 | 0xb8e1afedL, 0x6a267e96L, 0xba7c9045L, 0xf12c7f99L,
157 | 0x24a19947L, 0xb3916cf7L, 0x0801f2e2L, 0x858efc16L,
158 | 0x636920d8L, 0x71574e69L, 0xa458fea3L, 0xf4933d7eL,
159 | 0x0d95748fL, 0x728eb658L, 0x718bcd58L, 0x82154aeeL,
160 | 0x7b54a41dL, 0xc25a59b5L, 0x9c30d539L, 0x2af26013L,
161 | 0xc5d1b023L, 0x286085f0L, 0xca417918L, 0xb8db38efL,
162 | 0x8e79dcb0L, 0x603a180eL, 0x6c9e0e8bL, 0xb01e8a3eL,
163 | 0xd71577c1L, 0xbd314b27L, 0x78af2fdaL, 0x55605c60L,
164 | 0xe65525f3L, 0xaa55ab94L, 0x57489862L, 0x63e81440L,
165 | 0x55ca396aL, 0x2aab10b6L, 0xb4cc5c34L, 0x1141e8ceL,
166 | 0xa15486afL, 0x7c72e993L, 0xb3ee1411L, 0x636fbc2aL,
167 | 0x2ba9c55dL, 0x741831f6L, 0xce5c3e16L, 0x9b87931eL,
168 | 0xafd6ba33L, 0x6c24cf5cL, 0x7a325381L, 0x28958677L,
169 | 0x3b8f4898L, 0x6b4bb9afL, 0xc4bfe81bL, 0x66282193L,
170 | 0x61d809ccL, 0xfb21a991L, 0x487cac60L, 0x5dec8032L,
171 | 0xef845d5dL, 0xe98575b1L, 0xdc262302L, 0xeb651b88L,
172 | 0x23893e81L, 0xd396acc5L, 0x0f6d6ff3L, 0x83f44239L,
173 | 0x2e0b4482L, 0xa4842004L, 0x69c8f04aL, 0x9e1f9b5eL,
174 | 0x21c66842L, 0xf6e96c9aL, 0x670c9c61L, 0xabd388f0L,
175 | 0x6a51a0d2L, 0xd8542f68L, 0x960fa728L, 0xab5133a3L,
176 | 0x6eef0b6cL, 0x137a3be4L, 0xba3bf050L, 0x7efb2a98L,
177 | 0xa1f1651dL, 0x39af0176L, 0x66ca593eL, 0x82430e88L,
178 | 0x8cee8619L, 0x456f9fb4L, 0x7d84a5c3L, 0x3b8b5ebeL,
179 | 0xe06f75d8L, 0x85c12073L, 0x401a449fL, 0x56c16aa6L,
180 | 0x4ed3aa62L, 0x363f7706L, 0x1bfedf72L, 0x429b023dL,
181 | 0x37d0d724L, 0xd00a1248L, 0xdb0fead3L, 0x49f1c09bL,
182 | 0x075372c9L, 0x80991b7bL, 0x25d479d8L, 0xf6e8def7L,
183 | 0xe3fe501aL, 0xb6794c3bL, 0x976ce0bdL, 0x04c006baL,
184 | 0xc1a94fb6L, 0x409f60c4L, 0x5e5c9ec2L, 0x196a2463L,
185 | 0x68fb6fafL, 0x3e6c53b5L, 0x1339b2ebL, 0x3b52ec6fL,
186 | 0x6dfc511fL, 0x9b30952cL, 0xcc814544L, 0xaf5ebd09L,
187 | 0xbee3d004L, 0xde334afdL, 0x660f2807L, 0x192e4bb3L,
188 | 0xc0cba857L, 0x45c8740fL, 0xd20b5f39L, 0xb9d3fbdbL,
189 | 0x5579c0bdL, 0x1a60320aL, 0xd6a100c6L, 0x402c7279L,
190 | 0x679f25feL, 0xfb1fa3ccL, 0x8ea5e9f8L, 0xdb3222f8L,
191 | 0x3c7516dfL, 0xfd616b15L, 0x2f501ec8L, 0xad0552abL,
192 | 0x323db5faL, 0xfd238760L, 0x53317b48L, 0x3e00df82L,
193 | 0x9e5c57bbL, 0xca6f8ca0L, 0x1a87562eL, 0xdf1769dbL,
194 | 0xd542a8f6L, 0x287effc3L, 0xac6732c6L, 0x8c4f5573L,
195 | 0x695b27b0L, 0xbbca58c8L, 0xe1ffa35dL, 0xb8f011a0L,
196 | 0x10fa3d98L, 0xfd2183b8L, 0x4afcb56cL, 0x2dd1d35bL,
197 | 0x9a53e479L, 0xb6f84565L, 0xd28e49bcL, 0x4bfb9790L,
198 | 0xe1ddf2daL, 0xa4cb7e33L, 0x62fb1341L, 0xcee4c6e8L,
199 | 0xef20cadaL, 0x36774c01L, 0xd07e9efeL, 0x2bf11fb4L,
200 | 0x95dbda4dL, 0xae909198L, 0xeaad8e71L, 0x6b93d5a0L,
201 | 0xd08ed1d0L, 0xafc725e0L, 0x8e3c5b2fL, 0x8e7594b7L,
202 | 0x8ff6e2fbL, 0xf2122b64L, 0x8888b812L, 0x900df01cL,
203 | 0x4fad5ea0L, 0x688fc31cL, 0xd1cff191L, 0xb3a8c1adL,
204 | 0x2f2f2218L, 0xbe0e1777L, 0xea752dfeL, 0x8b021fa1L,
205 | 0xe5a0cc0fL, 0xb56f74e8L, 0x18acf3d6L, 0xce89e299L,
206 | 0xb4a84fe0L, 0xfd13e0b7L, 0x7cc43b81L, 0xd2ada8d9L,
207 | 0x165fa266L, 0x80957705L, 0x93cc7314L, 0x211a1477L,
208 | 0xe6ad2065L, 0x77b5fa86L, 0xc75442f5L, 0xfb9d35cfL,
209 | 0xebcdaf0cL, 0x7b3e89a0L, 0xd6411bd3L, 0xae1e7e49L,
210 | 0x00250e2dL, 0x2071b35eL, 0x226800bbL, 0x57b8e0afL,
211 | 0x2464369bL, 0xf009b91eL, 0x5563911dL, 0x59dfa6aaL,
212 | 0x78c14389L, 0xd95a537fL, 0x207d5ba2L, 0x02e5b9c5L,
213 | 0x83260376L, 0x6295cfa9L, 0x11c81968L, 0x4e734a41L,
214 | 0xb3472dcaL, 0x7b14a94aL, 0x1b510052L, 0x9a532915L,
215 | 0xd60f573fL, 0xbc9bc6e4L, 0x2b60a476L, 0x81e67400L,
216 | 0x08ba6fb5L, 0x571be91fL, 0xf296ec6bL, 0x2a0dd915L,
217 | 0xb6636521L, 0xe7b9f9b6L, 0xff34052eL, 0xc5855664L,
218 | 0x53b02d5dL, 0xa99f8fa1L, 0x08ba4799L, 0x6e85076aL,
219 |
220 | 0x4b7a70e9L, 0xb5b32944L, 0xdb75092eL, 0xc4192623L,
221 | 0xad6ea6b0L, 0x49a7df7dL, 0x9cee60b8L, 0x8fedb266L,
222 | 0xecaa8c71L, 0x699a17ffL, 0x5664526cL, 0xc2b19ee1L,
223 | 0x193602a5L, 0x75094c29L, 0xa0591340L, 0xe4183a3eL,
224 | 0x3f54989aL, 0x5b429d65L, 0x6b8fe4d6L, 0x99f73fd6L,
225 | 0xa1d29c07L, 0xefe830f5L, 0x4d2d38e6L, 0xf0255dc1L,
226 | 0x4cdd2086L, 0x8470eb26L, 0x6382e9c6L, 0x021ecc5eL,
227 | 0x09686b3fL, 0x3ebaefc9L, 0x3c971814L, 0x6b6a70a1L,
228 | 0x687f3584L, 0x52a0e286L, 0xb79c5305L, 0xaa500737L,
229 | 0x3e07841cL, 0x7fdeae5cL, 0x8e7d44ecL, 0x5716f2b8L,
230 | 0xb03ada37L, 0xf0500c0dL, 0xf01c1f04L, 0x0200b3ffL,
231 | 0xae0cf51aL, 0x3cb574b2L, 0x25837a58L, 0xdc0921bdL,
232 | 0xd19113f9L, 0x7ca92ff6L, 0x94324773L, 0x22f54701L,
233 | 0x3ae5e581L, 0x37c2dadcL, 0xc8b57634L, 0x9af3dda7L,
234 | 0xa9446146L, 0x0fd0030eL, 0xecc8c73eL, 0xa4751e41L,
235 | 0xe238cd99L, 0x3bea0e2fL, 0x3280bba1L, 0x183eb331L,
236 | 0x4e548b38L, 0x4f6db908L, 0x6f420d03L, 0xf60a04bfL,
237 | 0x2cb81290L, 0x24977c79L, 0x5679b072L, 0xbcaf89afL,
238 | 0xde9a771fL, 0xd9930810L, 0xb38bae12L, 0xdccf3f2eL,
239 | 0x5512721fL, 0x2e6b7124L, 0x501adde6L, 0x9f84cd87L,
240 | 0x7a584718L, 0x7408da17L, 0xbc9f9abcL, 0xe94b7d8cL,
241 | 0xec7aec3aL, 0xdb851dfaL, 0x63094366L, 0xc464c3d2L,
242 | 0xef1c1847L, 0x3215d908L, 0xdd433b37L, 0x24c2ba16L,
243 | 0x12a14d43L, 0x2a65c451L, 0x50940002L, 0x133ae4ddL,
244 | 0x71dff89eL, 0x10314e55L, 0x81ac77d6L, 0x5f11199bL,
245 | 0x043556f1L, 0xd7a3c76bL, 0x3c11183bL, 0x5924a509L,
246 | 0xf28fe6edL, 0x97f1fbfaL, 0x9ebabf2cL, 0x1e153c6eL,
247 | 0x86e34570L, 0xeae96fb1L, 0x860e5e0aL, 0x5a3e2ab3L,
248 | 0x771fe71cL, 0x4e3d06faL, 0x2965dcb9L, 0x99e71d0fL,
249 | 0x803e89d6L, 0x5266c825L, 0x2e4cc978L, 0x9c10b36aL,
250 | 0xc6150ebaL, 0x94e2ea78L, 0xa5fc3c53L, 0x1e0a2df4L,
251 | 0xf2f74ea7L, 0x361d2b3dL, 0x1939260fL, 0x19c27960L,
252 | 0x5223a708L, 0xf71312b6L, 0xebadfe6eL, 0xeac31f66L,
253 | 0xe3bc4595L, 0xa67bc883L, 0xb17f37d1L, 0x018cff28L,
254 | 0xc332ddefL, 0xbe6c5aa5L, 0x65582185L, 0x68ab9802L,
255 | 0xeecea50fL, 0xdb2f953bL, 0x2aef7dadL, 0x5b6e2f84L,
256 | 0x1521b628L, 0x29076170L, 0xecdd4775L, 0x619f1510L,
257 | 0x13cca830L, 0xeb61bd96L, 0x0334fe1eL, 0xaa0363cfL,
258 | 0xb5735c90L, 0x4c70a239L, 0xd59e9e0bL, 0xcbaade14L,
259 | 0xeecc86bcL, 0x60622ca7L, 0x9cab5cabL, 0xb2f3846eL,
260 | 0x648b1eafL, 0x19bdf0caL, 0xa02369b9L, 0x655abb50L,
261 | 0x40685a32L, 0x3c2ab4b3L, 0x319ee9d5L, 0xc021b8f7L,
262 | 0x9b540b19L, 0x875fa099L, 0x95f7997eL, 0x623d7da8L,
263 | 0xf837889aL, 0x97e32d77L, 0x11ed935fL, 0x16681281L,
264 | 0x0e358829L, 0xc7e61fd6L, 0x96dedfa1L, 0x7858ba99L,
265 | 0x57f584a5L, 0x1b227263L, 0x9b83c3ffL, 0x1ac24696L,
266 | 0xcdb30aebL, 0x532e3054L, 0x8fd948e4L, 0x6dbc3128L,
267 | 0x58ebf2efL, 0x34c6ffeaL, 0xfe28ed61L, 0xee7c3c73L,
268 | 0x5d4a14d9L, 0xe864b7e3L, 0x42105d14L, 0x203e13e0L,
269 | 0x45eee2b6L, 0xa3aaabeaL, 0xdb6c4f15L, 0xfacb4fd0L,
270 | 0xc742f442L, 0xef6abbb5L, 0x654f3b1dL, 0x41cd2105L,
271 | 0xd81e799eL, 0x86854dc7L, 0xe44b476aL, 0x3d816250L,
272 | 0xcf62a1f2L, 0x5b8d2646L, 0xfc8883a0L, 0xc1c7b6a3L,
273 | 0x7f1524c3L, 0x69cb7492L, 0x47848a0bL, 0x5692b285L,
274 | 0x095bbf00L, 0xad19489dL, 0x1462b174L, 0x23820e00L,
275 | 0x58428d2aL, 0x0c55f5eaL, 0x1dadf43eL, 0x233f7061L,
276 | 0x3372f092L, 0x8d937e41L, 0xd65fecf1L, 0x6c223bdbL,
277 | 0x7cde3759L, 0xcbee7460L, 0x4085f2a7L, 0xce77326eL,
278 | 0xa6078084L, 0x19f8509eL, 0xe8efd855L, 0x61d99735L,
279 | 0xa969a7aaL, 0xc50c06c2L, 0x5a04abfcL, 0x800bcadcL,
280 | 0x9e447a2eL, 0xc3453484L, 0xfdd56705L, 0x0e1e9ec9L,
281 | 0xdb73dbd3L, 0x105588cdL, 0x675fda79L, 0xe3674340L,
282 | 0xc5c43465L, 0x713e38d8L, 0x3d28f89eL, 0xf16dff20L,
283 | 0x153e21e7L, 0x8fb03d4aL, 0xe6e39f2bL, 0xdb83adf7L,
284 |
285 | 0xe93d5a68L, 0x948140f7L, 0xf64c261cL, 0x94692934L,
286 | 0x411520f7L, 0x7602d4f7L, 0xbcf46b2eL, 0xd4a20068L,
287 | 0xd4082471L, 0x3320f46aL, 0x43b7d4b7L, 0x500061afL,
288 | 0x1e39f62eL, 0x97244546L, 0x14214f74L, 0xbf8b8840L,
289 | 0x4d95fc1dL, 0x96b591afL, 0x70f4ddd3L, 0x66a02f45L,
290 | 0xbfbc09ecL, 0x03bd9785L, 0x7fac6dd0L, 0x31cb8504L,
291 | 0x96eb27b3L, 0x55fd3941L, 0xda2547e6L, 0xabca0a9aL,
292 | 0x28507825L, 0x530429f4L, 0x0a2c86daL, 0xe9b66dfbL,
293 | 0x68dc1462L, 0xd7486900L, 0x680ec0a4L, 0x27a18deeL,
294 | 0x4f3ffea2L, 0xe887ad8cL, 0xb58ce006L, 0x7af4d6b6L,
295 | 0xaace1e7cL, 0xd3375fecL, 0xce78a399L, 0x406b2a42L,
296 | 0x20fe9e35L, 0xd9f385b9L, 0xee39d7abL, 0x3b124e8bL,
297 | 0x1dc9faf7L, 0x4b6d1856L, 0x26a36631L, 0xeae397b2L,
298 | 0x3a6efa74L, 0xdd5b4332L, 0x6841e7f7L, 0xca7820fbL,
299 | 0xfb0af54eL, 0xd8feb397L, 0x454056acL, 0xba489527L,
300 | 0x55533a3aL, 0x20838d87L, 0xfe6ba9b7L, 0xd096954bL,
301 | 0x55a867bcL, 0xa1159a58L, 0xcca92963L, 0x99e1db33L,
302 | 0xa62a4a56L, 0x3f3125f9L, 0x5ef47e1cL, 0x9029317cL,
303 | 0xfdf8e802L, 0x04272f70L, 0x80bb155cL, 0x05282ce3L,
304 | 0x95c11548L, 0xe4c66d22L, 0x48c1133fL, 0xc70f86dcL,
305 | 0x07f9c9eeL, 0x41041f0fL, 0x404779a4L, 0x5d886e17L,
306 | 0x325f51ebL, 0xd59bc0d1L, 0xf2bcc18fL, 0x41113564L,
307 | 0x257b7834L, 0x602a9c60L, 0xdff8e8a3L, 0x1f636c1bL,
308 | 0x0e12b4c2L, 0x02e1329eL, 0xaf664fd1L, 0xcad18115L,
309 | 0x6b2395e0L, 0x333e92e1L, 0x3b240b62L, 0xeebeb922L,
310 | 0x85b2a20eL, 0xe6ba0d99L, 0xde720c8cL, 0x2da2f728L,
311 | 0xd0127845L, 0x95b794fdL, 0x647d0862L, 0xe7ccf5f0L,
312 | 0x5449a36fL, 0x877d48faL, 0xc39dfd27L, 0xf33e8d1eL,
313 | 0x0a476341L, 0x992eff74L, 0x3a6f6eabL, 0xf4f8fd37L,
314 | 0xa812dc60L, 0xa1ebddf8L, 0x991be14cL, 0xdb6e6b0dL,
315 | 0xc67b5510L, 0x6d672c37L, 0x2765d43bL, 0xdcd0e804L,
316 | 0xf1290dc7L, 0xcc00ffa3L, 0xb5390f92L, 0x690fed0bL,
317 | 0x667b9ffbL, 0xcedb7d9cL, 0xa091cf0bL, 0xd9155ea3L,
318 | 0xbb132f88L, 0x515bad24L, 0x7b9479bfL, 0x763bd6ebL,
319 | 0x37392eb3L, 0xcc115979L, 0x8026e297L, 0xf42e312dL,
320 | 0x6842ada7L, 0xc66a2b3bL, 0x12754cccL, 0x782ef11cL,
321 | 0x6a124237L, 0xb79251e7L, 0x06a1bbe6L, 0x4bfb6350L,
322 | 0x1a6b1018L, 0x11caedfaL, 0x3d25bdd8L, 0xe2e1c3c9L,
323 | 0x44421659L, 0x0a121386L, 0xd90cec6eL, 0xd5abea2aL,
324 | 0x64af674eL, 0xda86a85fL, 0xbebfe988L, 0x64e4c3feL,
325 | 0x9dbc8057L, 0xf0f7c086L, 0x60787bf8L, 0x6003604dL,
326 | 0xd1fd8346L, 0xf6381fb0L, 0x7745ae04L, 0xd736fcccL,
327 | 0x83426b33L, 0xf01eab71L, 0xb0804187L, 0x3c005e5fL,
328 | 0x77a057beL, 0xbde8ae24L, 0x55464299L, 0xbf582e61L,
329 | 0x4e58f48fL, 0xf2ddfda2L, 0xf474ef38L, 0x8789bdc2L,
330 | 0x5366f9c3L, 0xc8b38e74L, 0xb475f255L, 0x46fcd9b9L,
331 | 0x7aeb2661L, 0x8b1ddf84L, 0x846a0e79L, 0x915f95e2L,
332 | 0x466e598eL, 0x20b45770L, 0x8cd55591L, 0xc902de4cL,
333 | 0xb90bace1L, 0xbb8205d0L, 0x11a86248L, 0x7574a99eL,
334 | 0xb77f19b6L, 0xe0a9dc09L, 0x662d09a1L, 0xc4324633L,
335 | 0xe85a1f02L, 0x09f0be8cL, 0x4a99a025L, 0x1d6efe10L,
336 | 0x1ab93d1dL, 0x0ba5a4dfL, 0xa186f20fL, 0x2868f169L,
337 | 0xdcb7da83L, 0x573906feL, 0xa1e2ce9bL, 0x4fcd7f52L,
338 | 0x50115e01L, 0xa70683faL, 0xa002b5c4L, 0x0de6d027L,
339 | 0x9af88c27L, 0x773f8641L, 0xc3604c06L, 0x61a806b5L,
340 | 0xf0177a28L, 0xc0f586e0L, 0x006058aaL, 0x30dc7d62L,
341 | 0x11e69ed7L, 0x2338ea63L, 0x53c2dd94L, 0xc2c21634L,
342 | 0xbbcbee56L, 0x90bcb6deL, 0xebfc7da1L, 0xce591d76L,
343 | 0x6f05e409L, 0x4b7c0188L, 0x39720a3dL, 0x7c927c24L,
344 | 0x86e3725fL, 0x724d9db9L, 0x1ac15bb4L, 0xd39eb8fcL,
345 | 0xed545578L, 0x08fca5b5L, 0xd83d7cd3L, 0x4dad0fc4L,
346 | 0x1e50ef5eL, 0xb161e6f8L, 0xa28514d9L, 0x6c51133cL,
347 | 0x6fd5c7e7L, 0x56e14ec4L, 0x362abfceL, 0xddc6c837L,
348 | 0xd79a3234L, 0x92638212L, 0x670efa8eL, 0x406000e0L,
349 |
350 | 0x3a39ce37L, 0xd3faf5cfL, 0xabc27737L, 0x5ac52d1bL,
351 | 0x5cb0679eL, 0x4fa33742L, 0xd3822740L, 0x99bc9bbeL,
352 | 0xd5118e9dL, 0xbf0f7315L, 0xd62d1c7eL, 0xc700c47bL,
353 | 0xb78c1b6bL, 0x21a19045L, 0xb26eb1beL, 0x6a366eb4L,
354 | 0x5748ab2fL, 0xbc946e79L, 0xc6a376d2L, 0x6549c2c8L,
355 | 0x530ff8eeL, 0x468dde7dL, 0xd5730a1dL, 0x4cd04dc6L,
356 | 0x2939bbdbL, 0xa9ba4650L, 0xac9526e8L, 0xbe5ee304L,
357 | 0xa1fad5f0L, 0x6a2d519aL, 0x63ef8ce2L, 0x9a86ee22L,
358 | 0xc089c2b8L, 0x43242ef6L, 0xa51e03aaL, 0x9cf2d0a4L,
359 | 0x83c061baL, 0x9be96a4dL, 0x8fe51550L, 0xba645bd6L,
360 | 0x2826a2f9L, 0xa73a3ae1L, 0x4ba99586L, 0xef5562e9L,
361 | 0xc72fefd3L, 0xf752f7daL, 0x3f046f69L, 0x77fa0a59L,
362 | 0x80e4a915L, 0x87b08601L, 0x9b09e6adL, 0x3b3ee593L,
363 | 0xe990fd5aL, 0x9e34d797L, 0x2cf0b7d9L, 0x022b8b51L,
364 | 0x96d5ac3aL, 0x017da67dL, 0xd1cf3ed6L, 0x7c7d2d28L,
365 | 0x1f9f25cfL, 0xadf2b89bL, 0x5ad6b472L, 0x5a88f54cL,
366 | 0xe029ac71L, 0xe019a5e6L, 0x47b0acfdL, 0xed93fa9bL,
367 | 0xe8d3c48dL, 0x283b57ccL, 0xf8d56629L, 0x79132e28L,
368 | 0x785f0191L, 0xed756055L, 0xf7960e44L, 0xe3d35e8cL,
369 | 0x15056dd4L, 0x88f46dbaL, 0x03a16125L, 0x0564f0bdL,
370 | 0xc3eb9e15L, 0x3c9057a2L, 0x97271aecL, 0xa93a072aL,
371 | 0x1b3f6d9bL, 0x1e6321f5L, 0xf59c66fbL, 0x26dcf319L,
372 | 0x7533d928L, 0xb155fdf5L, 0x03563482L, 0x8aba3cbbL,
373 | 0x28517711L, 0xc20ad9f8L, 0xabcc5167L, 0xccad925fL,
374 | 0x4de81751L, 0x3830dc8eL, 0x379d5862L, 0x9320f991L,
375 | 0xea7a90c2L, 0xfb3e7bceL, 0x5121ce64L, 0x774fbe32L,
376 | 0xa8b6e37eL, 0xc3293d46L, 0x48de5369L, 0x6413e680L,
377 | 0xa2ae0810L, 0xdd6db224L, 0x69852dfdL, 0x09072166L,
378 | 0xb39a460aL, 0x6445c0ddL, 0x586cdecfL, 0x1c20c8aeL,
379 | 0x5bbef7ddL, 0x1b588d40L, 0xccd2017fL, 0x6bb4e3bbL,
380 | 0xdda26a7eL, 0x3a59ff45L, 0x3e350a44L, 0xbcb4cdd5L,
381 | 0x72eacea8L, 0xfa6484bbL, 0x8d6612aeL, 0xbf3c6f47L,
382 | 0xd29be463L, 0x542f5d9eL, 0xaec2771bL, 0xf64e6370L,
383 | 0x740e0d8dL, 0xe75b1357L, 0xf8721671L, 0xaf537d5dL,
384 | 0x4040cb08L, 0x4eb4e2ccL, 0x34d2466aL, 0x0115af84L,
385 | 0xe1b00428L, 0x95983a1dL, 0x06b89fb4L, 0xce6ea048L,
386 | 0x6f3f3b82L, 0x3520ab82L, 0x011a1d4bL, 0x277227f8L,
387 | 0x611560b1L, 0xe7933fdcL, 0xbb3a792bL, 0x344525bdL,
388 | 0xa08839e1L, 0x51ce794bL, 0x2f32c9b7L, 0xa01fbac9L,
389 | 0xe01cc87eL, 0xbcc7d1f6L, 0xcf0111c3L, 0xa1e8aac7L,
390 | 0x1a908749L, 0xd44fbd9aL, 0xd0dadecbL, 0xd50ada38L,
391 | 0x0339c32aL, 0xc6913667L, 0x8df9317cL, 0xe0b12b4fL,
392 | 0xf79e59b7L, 0x43f5bb3aL, 0xf2d519ffL, 0x27d9459cL,
393 | 0xbf97222cL, 0x15e6fc2aL, 0x0f91fc71L, 0x9b941525L,
394 | 0xfae59361L, 0xceb69cebL, 0xc2a86459L, 0x12baa8d1L,
395 | 0xb6c1075eL, 0xe3056a0cL, 0x10d25065L, 0xcb03a442L,
396 | 0xe0ec6e0eL, 0x1698db3bL, 0x4c98a0beL, 0x3278e964L,
397 | 0x9f1f9532L, 0xe0d392dfL, 0xd3a0342bL, 0x8971f21eL,
398 | 0x1b0a7441L, 0x4ba3348cL, 0xc5be7120L, 0xc37632d8L,
399 | 0xdf359f8dL, 0x9b992f2eL, 0xe60b6f47L, 0x0fe3f11dL,
400 | 0xe54cda54L, 0x1edad891L, 0xce6279cfL, 0xcd3e7e6fL,
401 | 0x1618b166L, 0xfd2c1d05L, 0x848fd2c5L, 0xf6fb2299L,
402 | 0xf523f357L, 0xa6327623L, 0x93a83531L, 0x56cccd02L,
403 | 0xacf08162L, 0x5a75ebb5L, 0x6e163697L, 0x88d273ccL,
404 | 0xde966292L, 0x81b949d0L, 0x4c50901bL, 0x71c65614L,
405 | 0xe6c6c7bdL, 0x327a140aL, 0x45e1d006L, 0xc3f27b9aL,
406 | 0xc9aa53fdL, 0x62a80f00L, 0xbb25bfe2L, 0x35bdd2f6L,
407 | 0x71126905L, 0xb2040222L, 0xb6cbcf7cL, 0xcd769c2bL,
408 | 0x53113ec0L, 0x1640e3d3L, 0x38abbd60L, 0x2547adf0L,
409 | 0xba38209cL, 0xf746ce76L, 0x77afa1c5L, 0x20756060L,
410 | 0x85cbfe4eL, 0x8ae88dd8L, 0x7aaaf9b0L, 0x4cf9aa7eL,
411 | 0x1948c25cL, 0x02fb8a8cL, 0x01c36ae4L, 0xd6ebe1f9L,
412 | 0x90d4f869L, 0xa65cdea0L, 0x3f09252dL, 0xc208e69fL,
413 | 0xb74e6132L, 0xce77e25bL, 0x578fdfe3L, 0x3ac372e6L])
414 |
415 | P = array.array('L', [
416 | 0x243f6a88L, 0x85a308d3L, 0x13198a2eL, 0x03707344L,
417 | 0xa4093822L, 0x299f31d0L, 0x082efa98L, 0xec4e6c89L,
418 | 0x452821e6L, 0x38d01377L, 0xbe5466cfL, 0x34e90c6cL,
419 | 0xc0ac29b7L, 0xc97c50ddL, 0x3f84d5b5L, 0xb5470917L,
420 | 0x9216d5d9L, 0x8979fb1bL])
421 |
422 | return Ctx()
423 |
424 |
--------------------------------------------------------------------------------