1
// Copyright 2012 The Go Authors. All rights reserved.
2
// Use of this source code is governed by a BSD-style
3
// license that can be found in the LICENSE file.
9
// Core208 applies the Salsa20/8 core function to the 64-byte array in and puts
10
// the result into the 64-byte array out. The input and output may be the same array.
11
func Core208(out *[64]byte, in *[64]byte) {
12
j0 := uint32(in[0]) | uint32(in[1])<<8 | uint32(in[2])<<16 | uint32(in[3])<<24
13
j1 := uint32(in[4]) | uint32(in[5])<<8 | uint32(in[6])<<16 | uint32(in[7])<<24
14
j2 := uint32(in[8]) | uint32(in[9])<<8 | uint32(in[10])<<16 | uint32(in[11])<<24
15
j3 := uint32(in[12]) | uint32(in[13])<<8 | uint32(in[14])<<16 | uint32(in[15])<<24
16
j4 := uint32(in[16]) | uint32(in[17])<<8 | uint32(in[18])<<16 | uint32(in[19])<<24
17
j5 := uint32(in[20]) | uint32(in[21])<<8 | uint32(in[22])<<16 | uint32(in[23])<<24
18
j6 := uint32(in[24]) | uint32(in[25])<<8 | uint32(in[26])<<16 | uint32(in[27])<<24
19
j7 := uint32(in[28]) | uint32(in[29])<<8 | uint32(in[30])<<16 | uint32(in[31])<<24
20
j8 := uint32(in[32]) | uint32(in[33])<<8 | uint32(in[34])<<16 | uint32(in[35])<<24
21
j9 := uint32(in[36]) | uint32(in[37])<<8 | uint32(in[38])<<16 | uint32(in[39])<<24
22
j10 := uint32(in[40]) | uint32(in[41])<<8 | uint32(in[42])<<16 | uint32(in[43])<<24
23
j11 := uint32(in[44]) | uint32(in[45])<<8 | uint32(in[46])<<16 | uint32(in[47])<<24
24
j12 := uint32(in[48]) | uint32(in[49])<<8 | uint32(in[50])<<16 | uint32(in[51])<<24
25
j13 := uint32(in[52]) | uint32(in[53])<<8 | uint32(in[54])<<16 | uint32(in[55])<<24
26
j14 := uint32(in[56]) | uint32(in[57])<<8 | uint32(in[58])<<16 | uint32(in[59])<<24
27
j15 := uint32(in[60]) | uint32(in[61])<<8 | uint32(in[62])<<16 | uint32(in[63])<<24
29
x0, x1, x2, x3, x4, x5, x6, x7, x8 := j0, j1, j2, j3, j4, j5, j6, j7, j8
30
x9, x10, x11, x12, x13, x14, x15 := j9, j10, j11, j12, j13, j14, j15
32
for i := 0; i < 8; i += 2 {
34
x4 ^= bits.RotateLeft32(u, 7)
36
x8 ^= bits.RotateLeft32(u, 9)
38
x12 ^= bits.RotateLeft32(u, 13)
40
x0 ^= bits.RotateLeft32(u, 18)
43
x9 ^= bits.RotateLeft32(u, 7)
45
x13 ^= bits.RotateLeft32(u, 9)
47
x1 ^= bits.RotateLeft32(u, 13)
49
x5 ^= bits.RotateLeft32(u, 18)
52
x14 ^= bits.RotateLeft32(u, 7)
54
x2 ^= bits.RotateLeft32(u, 9)
56
x6 ^= bits.RotateLeft32(u, 13)
58
x10 ^= bits.RotateLeft32(u, 18)
61
x3 ^= bits.RotateLeft32(u, 7)
63
x7 ^= bits.RotateLeft32(u, 9)
65
x11 ^= bits.RotateLeft32(u, 13)
67
x15 ^= bits.RotateLeft32(u, 18)
70
x1 ^= bits.RotateLeft32(u, 7)
72
x2 ^= bits.RotateLeft32(u, 9)
74
x3 ^= bits.RotateLeft32(u, 13)
76
x0 ^= bits.RotateLeft32(u, 18)
79
x6 ^= bits.RotateLeft32(u, 7)
81
x7 ^= bits.RotateLeft32(u, 9)
83
x4 ^= bits.RotateLeft32(u, 13)
85
x5 ^= bits.RotateLeft32(u, 18)
88
x11 ^= bits.RotateLeft32(u, 7)
90
x8 ^= bits.RotateLeft32(u, 9)
92
x9 ^= bits.RotateLeft32(u, 13)
94
x10 ^= bits.RotateLeft32(u, 18)
97
x12 ^= bits.RotateLeft32(u, 7)
99
x13 ^= bits.RotateLeft32(u, 9)
101
x14 ^= bits.RotateLeft32(u, 13)
103
x15 ^= bits.RotateLeft32(u, 18)
123
out[1] = byte(x0 >> 8)
124
out[2] = byte(x0 >> 16)
125
out[3] = byte(x0 >> 24)
128
out[5] = byte(x1 >> 8)
129
out[6] = byte(x1 >> 16)
130
out[7] = byte(x1 >> 24)
133
out[9] = byte(x2 >> 8)
134
out[10] = byte(x2 >> 16)
135
out[11] = byte(x2 >> 24)
138
out[13] = byte(x3 >> 8)
139
out[14] = byte(x3 >> 16)
140
out[15] = byte(x3 >> 24)
143
out[17] = byte(x4 >> 8)
144
out[18] = byte(x4 >> 16)
145
out[19] = byte(x4 >> 24)
148
out[21] = byte(x5 >> 8)
149
out[22] = byte(x5 >> 16)
150
out[23] = byte(x5 >> 24)
153
out[25] = byte(x6 >> 8)
154
out[26] = byte(x6 >> 16)
155
out[27] = byte(x6 >> 24)
158
out[29] = byte(x7 >> 8)
159
out[30] = byte(x7 >> 16)
160
out[31] = byte(x7 >> 24)
163
out[33] = byte(x8 >> 8)
164
out[34] = byte(x8 >> 16)
165
out[35] = byte(x8 >> 24)
168
out[37] = byte(x9 >> 8)
169
out[38] = byte(x9 >> 16)
170
out[39] = byte(x9 >> 24)
173
out[41] = byte(x10 >> 8)
174
out[42] = byte(x10 >> 16)
175
out[43] = byte(x10 >> 24)
178
out[45] = byte(x11 >> 8)
179
out[46] = byte(x11 >> 16)
180
out[47] = byte(x11 >> 24)
183
out[49] = byte(x12 >> 8)
184
out[50] = byte(x12 >> 16)
185
out[51] = byte(x12 >> 24)
188
out[53] = byte(x13 >> 8)
189
out[54] = byte(x13 >> 16)
190
out[55] = byte(x13 >> 24)
193
out[57] = byte(x14 >> 8)
194
out[58] = byte(x14 >> 16)
195
out[59] = byte(x14 >> 24)
198
out[61] = byte(x15 >> 8)
199
out[62] = byte(x15 >> 16)
200
out[63] = byte(x15 >> 24)