Tom Butcher
8f2d3a2489
- Created .gitignore to exclude build artifacts and dependencies. - Added package.json and package-lock.json for project dependencies and scripts. - Included pnpm workspace configuration for managing packages. - Implemented TypeScript configuration in tsconfig.json. - Added README.md with project description and usage instructions. - Introduced native code for DES encryption and decryption in C/C++. - Created initial decoded data structure for handling scan results. - Established basic file structure for decoded outputs and native builds.
179 lines
6.3 KiB
Metal
179 lines
6.3 KiB
Metal
#include <metal_stdlib>
|
|
using namespace metal;
|
|
|
|
// DES bit numbering: bit 1 is the MSB of a 64-bit word.
|
|
|
|
constant uchar IP_TBL[64] = {
|
|
58,50,42,34,26,18,10, 2, 60,52,44,36,28,20,12, 4,
|
|
62,54,46,38,30,22,14, 6, 64,56,48,40,32,24,16, 8,
|
|
57,49,41,33,25,17, 9, 1, 59,51,43,35,27,19,11, 3,
|
|
61,53,45,37,29,21,13, 5, 63,55,47,39,31,23,15, 7
|
|
};
|
|
constant uchar FP_TBL[64] = {
|
|
40, 8,48,16,56,24,64,32, 39, 7,47,15,55,23,63,31,
|
|
38, 6,46,14,54,22,62,30, 37, 5,45,13,53,21,61,29,
|
|
36, 4,44,12,52,20,60,28, 35, 3,43,11,51,19,59,27,
|
|
34, 2,42,10,50,18,58,26, 33, 1,41, 9,49,17,57,25
|
|
};
|
|
constant uchar E_TBL[48] = {
|
|
32, 1, 2, 3, 4, 5, 4, 5, 6, 7, 8, 9,
|
|
8, 9,10,11,12,13, 12,13,14,15,16,17,
|
|
16,17,18,19,20,21, 20,21,22,23,24,25,
|
|
24,25,26,27,28,29, 28,29,30,31,32, 1
|
|
};
|
|
constant uchar P_TBL[32] = {
|
|
16, 7,20,21,29,12,28,17, 1,15,23,26, 5,18,31,10,
|
|
2, 8,24,14,32,27, 3, 9, 19,13,30, 6,22,11, 4,25
|
|
};
|
|
constant uchar PC1_TBL[56] = {
|
|
57,49,41,33,25,17, 9, 1,58,50,42,34,26,18,
|
|
10, 2,59,51,43,35,27, 19,11, 3,60,52,44,36,
|
|
63,55,47,39,31,23,15, 7,62,54,46,38,30,22,
|
|
14, 6,61,53,45,37,29, 21,13, 5,28,20,12, 4
|
|
};
|
|
constant uchar PC2_TBL[48] = {
|
|
14,17,11,24, 1, 5, 3,28,15, 6,21,10,
|
|
23,19,12, 4,26, 8, 16, 7,27,20,13, 2,
|
|
41,52,31,37,47,55, 30,40,51,45,33,48,
|
|
44,49,39,56,34,53, 46,42,50,36,29,32
|
|
};
|
|
constant uchar SHIFTS[16] = {1,1,2,2,2,2,2,2,1,2,2,2,2,2,2,1};
|
|
|
|
constant uchar SBOX[8][64] = {
|
|
{14,4,13,1,2,15,11,8,3,10,6,12,5,9,0,7, 0,15,7,4,14,2,13,1,10,6,12,11,9,5,3,8, 4,1,14,8,13,6,2,11,15,12,9,7,3,10,5,0, 15,12,8,2,4,9,1,7,5,11,3,14,10,0,6,13},
|
|
{15,1,8,14,6,11,3,4,9,7,2,13,12,0,5,10, 3,13,4,7,15,2,8,14,12,0,1,10,6,9,11,5, 0,14,7,11,10,4,13,1,5,8,12,6,9,3,2,15, 13,8,10,1,3,15,4,2,11,6,7,12,0,5,14,9},
|
|
{10,0,9,14,6,3,15,5,1,13,12,7,11,4,2,8, 13,7,0,9,3,4,6,10,2,8,5,14,12,11,15,1, 13,6,4,9,8,15,3,0,11,1,2,12,5,10,14,7, 1,10,13,0,6,9,8,7,4,15,14,3,11,5,2,12},
|
|
{7,13,14,3,0,6,9,10,1,2,8,5,11,12,4,15, 13,8,11,5,6,15,0,3,4,7,2,12,1,10,14,9, 10,6,9,0,12,11,7,13,15,1,3,14,5,2,8,4, 3,15,0,6,10,1,13,8,9,4,5,11,12,7,2,14},
|
|
{2,12,4,1,7,10,11,6,8,5,3,15,13,0,14,9, 14,11,2,12,4,7,13,1,5,0,15,10,3,9,8,6, 4,2,1,11,10,13,7,8,15,9,12,5,6,3,0,14, 11,8,12,7,1,14,2,13,6,15,0,9,10,4,5,3},
|
|
{12,1,10,15,9,2,6,8,0,13,3,4,14,7,5,11, 10,15,4,2,7,12,9,5,6,1,13,14,0,11,3,8, 9,14,15,5,2,8,12,3,7,0,4,10,1,13,11,6, 4,3,2,12,9,5,15,10,11,14,1,7,6,0,8,13},
|
|
{4,11,2,14,15,0,8,13,3,12,9,7,5,10,6,1, 13,0,11,7,4,9,1,10,14,3,5,12,2,15,8,6, 1,4,11,13,12,3,7,14,10,15,6,8,0,5,9,2, 6,11,13,8,1,4,10,7,9,5,0,15,14,2,3,12},
|
|
{13,2,8,4,6,15,11,1,10,9,3,14,5,0,12,7, 1,15,13,8,10,3,7,4,12,5,6,11,0,14,9,2, 7,11,4,1,9,12,14,2,0,6,10,13,15,3,5,8, 2,1,14,7,4,10,8,13,15,12,9,0,3,5,6,11}
|
|
};
|
|
|
|
inline ulong perm(ulong src, constant uchar *tbl, uint nout, uint srcbits) {
|
|
ulong outv = 0;
|
|
for (uint i = 0; i < nout; i++) {
|
|
ulong bit = (src >> (srcbits - tbl[i])) & 1UL;
|
|
outv = (outv << 1) | bit;
|
|
}
|
|
return outv;
|
|
}
|
|
|
|
inline uint rotl28(uint v, uint s) {
|
|
return ((v << s) | (v >> (28 - s))) & 0x0FFFFFFFu;
|
|
}
|
|
|
|
inline void des_key_schedule(ulong key, thread ulong sk[16]) {
|
|
ulong cd = perm(key, PC1_TBL, 56, 64);
|
|
uint c = uint(cd >> 28);
|
|
uint d = uint(cd & 0x0FFFFFFFUL);
|
|
for (uint r = 0; r < 16; r++) {
|
|
c = rotl28(c, SHIFTS[r]);
|
|
d = rotl28(d, SHIFTS[r]);
|
|
ulong cd2 = (ulong(c) << 28) | ulong(d);
|
|
sk[r] = perm(cd2, PC2_TBL, 48, 56);
|
|
}
|
|
}
|
|
|
|
inline uint feistel(uint r, ulong subkey) {
|
|
ulong er = perm(ulong(r), E_TBL, 48, 32) ^ subkey;
|
|
uint s = 0;
|
|
for (uint i = 0; i < 8; i++) {
|
|
uint chunk = uint((er >> (42 - 6 * i)) & 0x3F);
|
|
uint row = ((chunk & 0x20) >> 4) | (chunk & 1);
|
|
uint col = (chunk >> 1) & 0xF;
|
|
s = (s << 4) | uint(SBOX[i][row * 16 + col]);
|
|
}
|
|
return uint(perm(ulong(s), P_TBL, 32, 32));
|
|
}
|
|
|
|
inline ulong des_crypt(ulong block, thread ulong sk[16], bool decrypt) {
|
|
ulong ip = perm(block, IP_TBL, 64, 64);
|
|
uint l = uint(ip >> 32);
|
|
uint r = uint(ip & 0xFFFFFFFFUL);
|
|
for (uint i = 0; i < 16; i++) {
|
|
uint rnd = decrypt ? (15 - i) : i;
|
|
uint n = l ^ feistel(r, sk[rnd]);
|
|
l = r;
|
|
r = n;
|
|
}
|
|
ulong pre = (ulong(r) << 32) | ulong(l);
|
|
return perm(pre, FP_TBL, 64, 64);
|
|
}
|
|
|
|
struct Params {
|
|
ulong start;
|
|
uint key_len;
|
|
uint charset_len;
|
|
uint pad_byte;
|
|
uint fill_count;
|
|
uint batch_count;
|
|
uint _pad;
|
|
ulong target;
|
|
ulong fills[8];
|
|
};
|
|
|
|
struct Hit {
|
|
ulong index;
|
|
ulong key;
|
|
ulong plain;
|
|
};
|
|
|
|
inline ulong make_key(ulong index, constant Params &p, const device uchar *charset) {
|
|
uchar bytes[8];
|
|
for (uint i = 0; i < 8; i++) {
|
|
bytes[i] = uchar(p.pad_byte);
|
|
}
|
|
ulong n = index;
|
|
uint clen = p.charset_len;
|
|
for (int pos = int(p.key_len) - 1; pos >= 0; pos--) {
|
|
bytes[pos] = charset[n % clen];
|
|
n /= clen;
|
|
}
|
|
ulong key = 0;
|
|
for (uint i = 0; i < 8; i++) {
|
|
key = (key << 8) | ulong(bytes[i]);
|
|
}
|
|
return key;
|
|
}
|
|
|
|
inline bool is_fill(ulong pt, constant Params &p) {
|
|
for (uint i = 0; i < p.fill_count; i++) {
|
|
if (pt == p.fills[i]) {
|
|
return true;
|
|
}
|
|
}
|
|
return false;
|
|
}
|
|
|
|
kernel void des_known_answer(device ulong *out [[buffer(0)]],
|
|
uint gid [[thread_position_in_grid]]) {
|
|
if (gid != 0) return;
|
|
ulong key = 0x133457799BBCDFF1UL;
|
|
ulong pt = 0x0123456789ABCDEFUL;
|
|
ulong sk[16];
|
|
des_key_schedule(key, sk);
|
|
out[0] = des_crypt(pt, sk, false);
|
|
out[1] = des_crypt(out[0], sk, true);
|
|
}
|
|
|
|
kernel void des_brute(constant Params ¶ms [[buffer(0)]],
|
|
const device uchar *charset [[buffer(1)]],
|
|
device Hit *hits [[buffer(2)]],
|
|
device atomic_uint *hit_count [[buffer(3)]],
|
|
uint gid [[thread_position_in_grid]]) {
|
|
if (gid >= params.batch_count) return;
|
|
ulong index = params.start + ulong(gid);
|
|
ulong key = make_key(index, params, charset);
|
|
ulong sk[16];
|
|
des_key_schedule(key, sk);
|
|
ulong pt = des_crypt(params.target, sk, true);
|
|
if (!is_fill(pt, params)) return;
|
|
uint slot = atomic_fetch_add_explicit(hit_count, 1u, memory_order_relaxed);
|
|
if (slot < 256) {
|
|
hits[slot].index = index;
|
|
hits[slot].key = key;
|
|
hits[slot].plain = pt;
|
|
}
|
|
}
|